There is a bug bounty. You can email security@curv... @curvefi

Answer 2: It is great that Curve.fi has a bug bounty program and encourages users to report any potential security issues. It is important to make sure that any information shared is secure and encrypted, especially when working with sensitive data. If you do decide to email security@curve.fi, make sure to encrypt the email with a secure encryption protocol, such as PGP or GPG, to ensure that the data remains safe and secure. Additionally, if you are able to, reporting through a bug bounty platform may be a better option as it allows for greater oversight and control over the data being shared.

Definitely interesting, usually I report through bug bounty platforms as it was plain email I would prefer it encrypted unless the team decides otherwise.